HashiCorp security advisory (AV26-817)

[MalBot]

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>

        <div><p><strong>Serial number: </strong>AV26-817<br /><strong>Date: </strong>August 14, 2026</p>

As of August 13, 2026, HashiCorp is affected by a vulnerability in the following product

• Vault Secrets Operator - Prior to 1.5.0

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• HCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPath
• Security - HashiCorp Discuss

</div>

Article Link: HashiCorp security advisory (AV26-817) - Canadian Centre for Cyber Security